Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/qrs3hwC2Q7uHHoUzKY4rWu-vIaU.roa
File: qrs3hwC2Q7uHHoUzKY4rWu-vIaU.roa (raw, json)
Hash identifier: iH7T/YIsEwIaJiWs2/7+zTlR0iTvTxwCtITlGEfKyi0=
Subject key identifier: AA:BB:37:87:00:B6:43:BB:87:1E:85:33:29:8E:2B:5A:EF:AF:21:A5
Certificate issuer: /CN=5768aceefd1ee9a85fda94c823e11e4a426b91e9
Certificate serial: 01A08C76BE53410CABEA48A6B29FDC9529E4
Authority key identifier: 57:68:AC:EE:FD:1E:E9:A8:5F:DA:94:C8:23:E1:1E:4A:42:6B:91:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/qrs3hwC2Q7uHHoUzKY4rWu-vIaU.roa
Signing time: Thu 10 Sep 2026 17:56:27 +0000
ROA not before: Thu 10 Sep 2026 17:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57608
IP address blocks: 193.32.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:76:be:53:41:0c:ab:ea:48:a6:b2:9f:dc:95:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5768aceefd1ee9a85fda94c823e11e4a426b91e9
Validity
Not Before: Sep 10 17:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aabb378700b643bb871e8533298e2b5aefaf21a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:31:15:82:c1:e0:a1:fc:63:a7:47:bb:11:
48:84:e9:c3:a8:0b:ad:cb:07:e4:94:f6:d5:47:f5:
23:12:70:cf:22:30:45:5b:49:89:1c:af:86:cb:51:
38:26:5c:fe:04:30:03:64:79:e0:e1:2e:2a:68:aa:
a0:22:f5:c7:63:65:5d:75:6f:52:17:05:28:55:92:
d1:30:4d:f0:16:19:07:c9:4f:bd:59:80:1c:3e:53:
ec:b3:fa:9d:81:69:9f:75:f4:59:e7:a0:f8:01:c3:
73:bf:7d:d8:c1:8e:5b:49:c9:03:64:76:d1:bb:e0:
a5:c1:1c:ea:a6:1d:81:04:7f:8e:db:42:72:e3:89:
ee:d2:03:af:b2:77:c1:9a:51:86:32:45:cc:d8:e3:
7e:41:77:cb:2e:7d:ed:40:20:cf:a6:8f:46:2e:28:
e2:a8:1d:76:5a:40:92:22:a2:39:59:18:93:05:89:
e0:55:e0:4b:d7:f2:e0:c4:a0:38:c8:d7:c2:dd:a8:
07:38:88:f8:48:2e:b6:fa:a7:a3:56:59:d8:e2:93:
26:66:b8:ba:16:2c:44:ff:8c:40:84:16:b4:f8:b6:
56:8d:c2:2c:2e:9e:80:77:6a:e4:5e:38:c4:bb:9a:
ff:4f:c4:f6:03:9b:3c:74:e2:9e:22:be:5b:20:3c:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:37:87:00:B6:43:BB:87:1E:85:33:29:8E:2B:5A:EF:AF:21:A5
X509v3 Authority Key Identifier:
keyid:57:68:AC:EE:FD:1E:E9:A8:5F:DA:94:C8:23:E1:1E:4A:42:6B:91:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2is7v0e6ahf2pTII-EeSkJrkek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/qrs3hwC2Q7uHHoUzKY4rWu-vIaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/819ae9-a3fc-41a3-8b01-597e3cba150f/1/V2is7v0e6ahf2pTII-EeSkJrkek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
63:8e:8d:ef:05:2d:1e:db:35:e8:ba:dc:ea:e9:79:74:ef:a9:
eb:fe:2e:17:6c:0d:39:5a:ae:b4:21:63:41:d8:5b:c4:fb:31:
74:21:de:aa:08:27:db:ca:6d:2f:45:f7:6e:89:e5:22:1b:ae:
99:24:ab:c3:a3:a5:72:df:7a:be:77:b0:bd:1d:2e:d4:62:d2:
b4:74:06:40:e7:bf:b0:e8:b9:32:53:71:a0:46:3b:af:6e:b5:
e1:8c:cc:2d:ad:ce:ad:85:02:37:12:06:39:e9:2a:80:48:95:
c0:6f:e8:c8:6d:2c:1c:76:f8:fb:e5:08:58:93:65:0b:90:97:
47:97:07:92:86:ec:f2:c5:20:fb:15:6d:d8:c6:2b:a6:5a:eb:
ba:46:3a:5d:8f:36:b5:ad:71:72:18:96:bb:3f:14:d8:3e:69:
67:0c:b7:0f:a4:4f:37:cf:02:ab:57:e4:59:46:c9:4f:18:65:
53:2b:80:01:c9:65:a3:d2:c8:12:ce:85:80:a7:b4:fe:fb:ce:
d1:25:ac:59:da:d8:9d:98:85:5e:28:69:97:ee:90:3b:ce:7a:
b0:c7:ae:91:e6:69:aa:ba:f7:e0:20:3e:8b:87:5a:9c:36:70:
15:3f:27:bf:3b:47:40:9b:97:c6:ce:27:53:79:16:ce:af:a9:
89:d5:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:16 2026 by rpki-client